Sap. Create authorization field/object, assign auth OBJ to object class

Goller. cn sap Education	Sponsor Link
Www.goller.cn

 

Creating authorization Fields

In authorization objects, authorization fields represent the values to be tested during authorization checks.

 

To create authorization fields, choose tools> ABAP workbench> development> other tools> authorization objects> fields.

 

To create a authorization field:

 

1. Choose create authorization field.
2. On the next screen, enter the name of the field. Field names must be unique and must begin with the letter Y or Z.
3. assign a data element from the ABAP dictionary to the field.
4. if desired, enter a check table for the possible entries. for more information about check tables, see link to the check table. the Link provides possible field values. you can also define a value range by way of the area with which a field is associated.

For more information about authority-check, see the keyword documentation of the ABAP editor.

 

You can often use the fields defined by SAP in your own authorization objects. if you create a new authorization object, you do not need to define your own fields. for example, you can use the sap field actvt in your own authorization objects to represent a wide variety of actions in the system.

 

Assigning an authorization object to an object class

Each authorization object must be assigned to an object class when it is created.

Choose tools> ABAP workbench> development> other tools> authorization objects> objects. You can also create authorization objects in the object Navigator (se80 ).

Creating/choosing object classes

The system displays a list of existing object classes.

Object classes are organized according to the components of the system.

Before you can create a new object, you must define the object class for the component in which you are working. The objects are not overwritten when you install new releases.

You can also define your own object classes. If you do so, select class names that begin with Y or Z to avoid conflicts with SAP names.

Creating an object

Enter a unique object name and the fields that belong to the object. Object names must begin with the letter Y or Z in accordance with the naming convention for customer-specific objects.

You can enter up to ten authorization fields in an object definition. You must also enter a description of the object and create documentation for it.

Ensure that the object definition matches the authority-check cballs that refer to the object.

 

Do not change or delete authorization objects defined by SAP. This disables sap programs that use the objects.

You can regenerate the profile sap_all after creating an authorization object.

For further information, see the documentation in the transaction.

 

Http://help.sap.com/saphelp_bw33/helpdata/en/52/67167f439b11d1896f0000e8322d00/frameset.htm